I would suggest documenting specific training expectations such as:
* New employees will receive X training within the first 30 days, and will prove their understanding by . . .
* Existing employees will receive training on the following sub-topics annually; (e.g. identifying suspicious activity, validating identities of callers, location of CRA file, etc.)
* Employee knowledge of X will be assessed through quarterly management quizzes. Unacceptable scores of X or below will necessitate employee review of procedures within 30 days.
* Employees will certify their understanding of X by signing the X policy annually.
* Training procedures will be evaluated through . . .
* Dept manager will stay up to date on emerging trends and issues by subscribing to . . . /attending . . .
Adding those types of details moves training from ad hoc to a formal, repeatable, and measurable process. It allows examiners to clearly determine if employees got the training management intended for them. If you just retain sign-in sheets and agendas, there is no way for examiners to know 1) if it was enough training, or 2) if it was the right training. Identifying expectations within policy allows them to do that.